CVE-2022-43357

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exp...

Original description

The description as published by the source.

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami sass

[{"type":"SEMVER","events":[{"introduced":"3.6.5-8-g210218"},{"fixed":"3.6.5"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2022-43357 libsass

References

advisory nvd.nist.gov
advisory github.com
package github.com
report github.com
web drive.google.com